CVE-2018-1000076HIGH
Description
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerability in package.rb that can result in a mis-signed gem could be installed, as the tarball would contain multiple gem signatures.. This vulnerability appears to have been fixed in 2.7.6.
References
http://blog.rubygems.org/2018/02/15/2.7.6-released.html
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
https://access.redhat.com/errata/RHSA-2018:3729
https://access.redhat.com/errata/RHSA-2018:3730
https://access.redhat.com/errata/RHSA-2018:3731
https://access.redhat.com/errata/RHSA-2019:2028
https://github.com/rubygems/rubygems/commit/f5042b879259b1f1ce95a0c5082622c646376693
https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html
https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html
https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html
https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
https://usn.ubuntu.com/3621-1/
Details
Source: MITRE
Published: 2018-03-13
Updated: 2019-05-20
Type: CWE-347
Risk Information
CVSS v2.0
Base Score: 7.5
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 10
Severity: HIGH
CVSS v3.0
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
Severity: CRITICAL
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:* versions up to 2.2.9 (inclusive)
Configuration 2
OR
cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:* versions up to 2.3.6 (inclusive)
Configuration 3
OR
cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:* versions up to 2.4.3 (inclusive)
Configuration 4
OR
cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:* versions up to 2.5.0 (inclusive)
Configuration 5
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 137599 | SUSE SLES12 Security Update : ruby2.1 (SUSE-SU-2020:1570-1) | Nessus | SuSE Local Security Checks | high |
| 134261 | RHEL 7 : ruby (RHSA-2020:0663) | Nessus | Red Hat Local Security Checks | high |
| 134063 | RHEL 7 : ruby (RHSA-2020:0591) | Nessus | Red Hat Local Security Checks | high |
| 133785 | RHEL 7 : ruby (RHSA-2020:0542) | Nessus | Red Hat Local Security Checks | high |
| 132492 | NewStart CGSL CORE 5.05 / MAIN 5.05 : ruby Multiple Vulnerabilities (NS-SA-2019-0245) | Nessus | NewStart CGSL Local Security Checks | high |
| 131412 | NewStart CGSL CORE 5.04 / MAIN 5.04 : ruby Multiple Vulnerabilities (NS-SA-2019-0221) | Nessus | NewStart CGSL Local Security Checks | high |
| 128332 | CentOS 7 : ruby (CESA-2019:2028) | Nessus | CentOS Local Security Checks | high |
| 128290 | Amazon Linux 2 : ruby (ALAS-2019-1276) | Nessus | Amazon Linux Local Security Checks | high |
| 128260 | Scientific Linux Security Update : ruby on SL7.x x86_64 (20190806) | Nessus | Scientific Linux Local Security Checks | high |
| 127649 | RHEL 7 : ruby (RHSA-2019:2028) | Nessus | Red Hat Local Security Checks | high |
| 126904 | openSUSE Security Update : ruby-bundled-gems-rpmhelper / ruby2.5 (openSUSE-2019-1771) | Nessus | SuSE Local Security Checks | high |
| 126617 | SUSE SLED15 / SLES15 Security Update : ruby-bundled-gems-rpmhelper, ruby2.5 (SUSE-SU-2019:1804-1) | Nessus | SuSE Local Security Checks | high |
| 125297 | Debian DLA-1796-1 : jruby security update | Nessus | Debian Local Security Checks | high |
| 111468 | Debian DSA-4259-1 : ruby2.3 - security update | Nessus | Debian Local Security Checks | high |
| 111081 | Debian DLA-1421-1 : ruby2.1 security update | Nessus | Debian Local Security Checks | high |
| 110871 | EulerOS 2.0 SP3 : ruby (EulerOS-SA-2018-1207) | Nessus | Huawei Local Security Checks | high |
| 110418 | Debian DSA-4219-1 : jruby - security update | Nessus | Debian Local Security Checks | high |
| 110147 | EulerOS 2.0 SP1 : ruby (EulerOS-SA-2018-1143) | Nessus | Huawei Local Security Checks | high |
| 109506 | EulerOS 2.0 SP2 : ruby (EulerOS-SA-2018-1108) | Nessus | Huawei Local Security Checks | high |
| 109283 | Debian DLA-1358-1 : ruby1.9.1 security update | Nessus | Debian Local Security Checks | high |
| 109136 | Amazon Linux 2 : ruby (ALAS-2018-983) | Nessus | Amazon Linux Local Security Checks | high |
| 109058 | Ubuntu 14.04 LTS : Ruby regression (USN-3621-2) | Nessus | Ubuntu Local Security Checks | high |
| 108879 | Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : ruby1.9.1, ruby2.0, ruby2.3 vulnerabilities (USN-3621-1) | Nessus | Ubuntu Local Security Checks | high |
| 108846 | Amazon Linux AMI : ruby20 / ruby22,ruby23,ruby24 (ALAS-2018-983) | Nessus | Amazon Linux Local Security Checks | high |
| 108788 | Debian DLA-1337-1 : jruby security update | Nessus | Debian Local Security Checks | high |
| 108770 | Debian DLA-1336-1 : rubygems security update | Nessus | Debian Local Security Checks | high |